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CLAIMS ; 

What is claimed is: 

1. A method of upgrading the integrity of a first 
timestamp having a first digital signature, the method 
comprising : 

computing a hash value of the first digital 
signature; 

combining the hash value with a current time value 
to form a second data item; 

computing a second digital signature based on the 
second data item; and 

combining the second data item and the second 
digital signature to form a second timestamp. 

2. The method of claim 1, wherein computing the hash 
value, combining the hash value with the current time 
value, computing the second digital signature, and 
combining the second data item and the second digital 
signature are performed in response to a determination 
that the integrity of the first digital signature may 
soon become able to be compromised. 

3. The method of claim 1, further comprising writing 
the second timestamp to a storage medium. 

4. The method of claim 3, further comprising writing 
the first timestamp to the storage medium. 
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5. The method of claim 3, wherein the storage medium is 
memory . 

6. The method of claim 3, wherein the storage medium is 
one of a disk and tape. 

7. A method of upgrading the integrity of a first 
timestamp of a document, wherein the first timestamp 
includes a first hash value computed with a first hash 
function, the method comprising: 

calculating a second hash value of the document 
using a second hash function; 

combining the second hash value with a current time 
value to form a data item; 

computing a digital signature of the data item; and 

combining the digital signature and the data item to 
form a second timestamp. 

8. The method of claim 7, wherein computing the second 
hash value, combining the second hash value with the 
current time value, computing the digital signature, and 
combining the data item with the digital signature are 
performed in response to a determination that the 
integrity of the first hash value may soon become able to 
be compromised. 

9. The method of claim 7, further comprising writing 
the second timestamp to a storage medium. 
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1 10. The method of claim 9, further comprising writing 

2 the first timestamp to the storage medium. 

1 11. The method of claim 9, wherein the storage medium is 

2 memory . 

1 12. The method of claim 9, wherein the storage medium is 

2 one of a disk and tape. 



1 13 . A method of verifying the integrity of an upgrade 

2 timestamp associated with an earlier timestamp, 

3 comprising: 

4 verifying integrity of a first digital signature 

5 associated with the upgrade timestamp; 

6 calculating a first hash value of a second digital 

7 signature associated with the earlier timestamp; and 

8 verifying that the first hash value matches a second 

9 hash value associated with the upgrade timestamp. 

1 14. The method of claim 13, further comprising: 

2 verifying integrity of the earlier timestamp. 

1 15. The method of claim 14, wherein verifying the 

2 integrity of the earlier timestamp includes: 

3 verifying integrity of the second digital signature; 

4 calculating a third hash value of a document 

5 associated with the earlier timestamp; and 

6 verifying that the third hash value matches a fourth 

7 hash value associated with the earlier timestamp. 
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1 16. A method comprising: 

2 verifying integrity of each of a plurality of 

3 digital signatures, wherein each of the plurality of 

4 digital signatures signs a timestamp, and each timestamp 

5 includes a hash value of a common document, each hash 

6 value having been calculated with a different hash 

7 function. 

1 17. A computer program product in a computer readable 

2 medium for upgrading the integrity of a first timestamp 
~ 3 having a first digital signature, comprising functional 

ill 4 descriptive data that, when executed by a computer, 

M ■ 

y 5 enables the computer to perform acts including: 
J'' 6 computing a hash value of the first digital 

2 7 signature; 

* m 8 combining the hash value with a current time value 

9 to form a second data item; 
O 10 computing a second digital signature based on the 

11 second data item; and 

12 combining the second data item and the second 

13 digital signature to form a second timestamp. 

1 18. The computer program product of claim 17, wherein 

2 computing the hash value, combining the hash value with 

3 the current time value, computing the second digital 

4 signature, and combining the second data item and the 

5 second digital signature are performed in response to a 

6 determination that the integrity of the first digital 

7 signature may soon become able to be compromised. 
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1 19. The computer program product of claim 17, comprising 

2 additional functional descriptive data that, when 

3 executed by the computer, enables the computer to perform 

4 additional acts including: 

5 writing the second timestamp to a storage medium. 

1 20. The computer program product of claim 19, comprising 

2 additional functional descriptive data that, when 

3 executed by the computer, enables the computer to perform 

4 additional acts including: 

5 writing the first timestamp to the storage medium. 



hjj i 21. The computer program product of claim 19, wherein 

{2 2 the storage medium is memory. 

PI i 22. The computer program product of claim 19, wherein 

L~ 2 the storage medium is one of a disk and tape. 

1 23. A computer program product in a computer readable 

2 medium, for upgrading the integrity of a first timestamp 

3 of a document, wherein the first timestamp includes a 

4 first hash value computed with a first hash function, : 

5 comprising functional descriptive data that, when 

6 executed by a computer, enables the computer to perform 



7 acts including: 

8 calculating a second hash value of the document 

9 using a second hash function; 

10 combining the second hash value with a current time 

11 value to form a data item; 

12 computing a digital signature of the data item; and 
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13 combining the digital signature and the data item to 

14 form a second timestamp. 

1 24. The computer program product of claim 23, wherein 

2 computing the second hash value, combining the second 

3 hash value with the current time value, computing the 

4 digital signature, and combining the data item with the 

5 digital signature are performed in response to a 

6 determination that the integrity of the first hash value 

7 may soon become able to be compromised. 

1 25. The computer program product of claim 23, comprising 

2 additional functional descriptive data that, when 

3 executed by the computer, enables the computer to perform 

4 additional acts including: 

5 writing the second timestamp to a storage medium. 

1 26. The computer program product of claim 25, comprising 

2 additional functional descriptive data that, when 

3 executed by the computer, enables the computer to perform 

4 additional acts including: 

5 writing the first timestamp to the storage medium. 

1 27. The computer program product of claim 25, wherein 

2 the storage medium is memory. 

1 28. The computer program product of claim 25, wherein 

2 the storage medium is one of a disk and tape. 
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1 29. A computer program product in a computer- readable 

2 medium, for verifying the integrity of an upgrade 

3 timestamp associated with an earlier timestamp, 

4 comprising functional descriptive data that, when 

5 executed by a computer, enables the computer to perform 

6 acts including: 

7 verifying integrity of a first digital signature 

8 associated with the upgrade timestamp; 

9 calculating a first hash value of a second digital 
!Z 10 signature associated with the earlier timestamp; and 

D 11 verifying that the first hash value matches a second 

%j 12 hash value associated with the upgrade timestamp. 



h* 1 30. The computer program product of claim 29, comprising 

2 additional functional descriptive data that, when 

j^j 3 executed by the computer, enables the computer to perform 

pi 4 additional acts including: 

j~: 5 verifying integrity of the earlier timestamp. 

1 31. The computer program product of claim 30, wherein 

2 verifying the integrity of the earlier timestamp 

3 includes: 

4 verifying integrity of the second digital signature; 

5 calculating a third hash value of a document 

6 associated with the earlier timestamp; and 

7 verifying that the third hash value matches a fourth hash 

8 value associated with the earlier timestamp. 

1 32. A computer program product in a computer-readable 

2 medium, comprising functional descriptive data that, when 
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executed by a computer, enables the computer to perform 
acts including: 

verifying integrity of each of a plurality of 
digital signatures, wherein each of the plurality of 
digital signatures signs a timestamp, and each timestamp 
includes a hash value of a common document, each hash 
value having been calculated with a different hash 
function. 

33. A data processing system for upgrading the integrity 
of a first timestamp having a first digital signature, 
comprising means for: 

computing a hash value of the first digital 
signature; 

combining the hash value with a current time value 
to form a second data item; 

computing a second digital signature based on the 
second data item; and 

combining the second data item and the second digital 
signature to form a second timestamp. 

34. The data processing system of claim 33, wherein 
computing the hash value, combining the hash value with 
the current time value, computing the second digital 
signature, and combining the second data item and the 
second digital signature are performed in response to a 
determination that the integrity of the first digital 
signature may soon become able to be compromised. 
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1 35. The data processing system of claim 33, comprising 

2 additional means for writing the second timestamp to a 

3 storage medium. 

1 36. The data processing system of claim 35, comprising 

2 additional means for writing the first timestamp to the 

3 storage medium. 

I 37. The data processing system of claim 35, wherein the 
y. 2 storage medium is memory. 

W 1 38. The data processing system of claim 35, wherein the 

hi 2 storage medium is one of a disk and tape. 

Mi 

* 1 3 9. A data processing system for upgrading the integrity 

ki 2 of a first timestamp of a document, wherein the first 

W 3 timestamp includes a first hash value computed with a 

01 

0 4 first hash function, the data processing system 

5 comprising means for: 

6 calculating a second hash value of the document 

7 using a second hash function; 

8 combining the second hash value with a current time 

9 value to form a data item; 

10 computing a digital signature of the data item; and 

II combining the digital signature and the data item to 
12 form a second timestamp. 

1 40. The data processing system of claim 39, wherein 

2 computing the second hash value, combining the second 

3 hash value with the current time value, computing the 



Docket No. 2001-088-NSC 



digital signature, and combining the data item with the 
digital signature are performed in response to a 
determination that the integrity of the first hash value 
may soon become able to be compromised. 

41. The data processing system of claim 39, comprising 
additional means for writing the second timestamp to a 
storage medium. 

42. The data processing system of claim 41, comprising 
additional means for writing the first timestamp to the 
storage medium. 

43. The data processing system of claim 41, wherein the 
storage medium is memory. 

44. The data processing system of claim 41, wherein the 
storage medium is one of a disk and tape. 

45. A data processing system for verifying the integrity 
of an upgrade timestamp associated with an earlier 
timestamp, comprising means for: 

verifying integrity of a first digital signature 
associated with the upgrade timestamp; 

calculating a first hash value of a second digital 
signature associated with the earlier timestamp; and 

verifying that the first hash value matches a second 
hash value associated with the upgrade timestamp. 
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46. The data processing system of claim 45, comprising 
additional means for: 

verifying integrity of the earlier timestamp. 

47. The data processing system of claim 46, wherein 
verifying the integrity of the earlier timestamp 
includes : 

verifying integrity of the second digital signature; 

calculating a third hash value of a document 
associated with the earlier timestamp; and 

verifying that the third hash value matches a fourth 
hash value associated with the earlier timestamp. 

48. A data processing system comprising means for: 
verifying integrity of each of a plurality of 

digital signatures, wherein each of the plurality of 
digital signatures signs a timestamp, and each timestamp 
includes a hash value of a common document, each hash 
value having been calculated with a different hash 
function. 



